Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

ImageSharp — Vulnerabilities & Security Advisories 16

All 16 CVE vulnerabilities found in ImageSharp, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security weaknesses identified in the ImageSharp image processing library maintained by SixLabors. The collection encompasses a comprehensive history of disclosed vulnerabilities spanning from the project's inception through the most recent releases, covering issues ranging from memory corruption and integer overflows to improper input validation and denial of service conditions. Visitors can utilize this resource to track the vendor's official security advisories over time, analyze the prevalence and evolution of specific weakness classes within the image processing domain, or review the complete vulnerability history for the ImageSharp product to assess its current security posture. The data presented here serves as a centralized reference for security researchers, developers, and system administrators seeking to understand the landscape of risks associated with this widely adopted open-source library without needing to navigate multiple disparate sources. By consolidating these findings, the page facilitates efficient risk assessment and supports the development of robust mitigation strategies for applications integrating ImageSharp components. All entries are curated from verified public disclosures and vendor communications to ensure accuracy and relevance for ongoing security maintenance efforts.

Vendor: SixLabors

CVE ID Title CVSS Severity Published
CVE-2026-106118 ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB write CWE-787 7.5 High 2026-10-06
CVE-2026-106117 ImageSharp: CCITT fax decompression (T4/Modified Huffman): unbounded WriteBits overflows strip buffer — heap OOB write in SixLabors.ImageSharp CWE-787 7.5 High 2026-10-06
CVE-2026-106116 ImageSharp: BigTIFF IFD count can keep a decoder thread in a non-progressing loop CWE-835 5.3 Medium 2026-10-06
CVE-2026-106115 ImageSharp: TIFF CCITT T6 encoder writes beyond an undersized output buffer CWE-787 7.5 High 2026-10-06
CVE-2026-106114 ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensions CWE-789 5.3 Medium 2026-10-06
CVE-2026-106113 ImageSharp: HistogramEqualization uses an unvalidated luminance as an unchecked histogram index CWE-787 7.5 High 2026-10-06
CVE-2026-106112 ImageSharp: ICC LUT16 output channel count can write beyond Vector4 CWE-787 7.5 High 2026-10-06
CVE-2026-106111 ImageSharp: EXR ZIP decoder can expose stale allocator data after a short inflate CWE-226 5.9 Medium 2026-10-06
CVE-2026-106110 ImageSharp: TIFF CCITT T4 encoder can write past its compressed output buffer CWE-787 7.5 High 2026-10-06
CVE-2025-54575 ImageSharp Triggers an Infinite Loop in its GIF Decoder When Skipping Malformed Comment Extension Blocks CWE-400 5.3 Medium 2025-07-30
CVE-2025-27598 Out-of-bounds Write in SixLabors ImageSharp CWE-787 7.5 High 2025-03-06
CVE-2024-41132 SixLabors ImageSharp Allows Excessive Memory Allocation in Gif Decoder CWE-789 5.3 Medium 2024-07-22
CVE-2024-41131 Out-of-bounds Write in SixLabors ImageSharp CWE-787 7.5 High 2024-07-22
CVE-2024-32036 SixLabors.ImageSharp vulnerable to data leakage CWE-226 5.3 Medium 2024-04-15
CVE-2024-32035 Memory Allocation with Excessive Size Value in SixLabors.ImageSharp CWE-789 5.3 Medium 2024-04-15
CVE-2024-27929 Use After Free in SixLabors.ImageSharp CWE-416 7.1 High 2024-03-05

All 16 known CVE vulnerabilities affecting ImageSharp with full Chinese analysis, references, and POCs where available.